Publications

October 2014

Towards a Secure and Trusted Physical Object Model for Context Aware Computing

For smart gadgets to gain wider acceptance, we need to de- velop things that can program themselves as users manipulate them to perform their day-to-day chores (a good example is the Nest intelligent thermostat [1]). Users can interact with a ‘thing’ in the physical environment in many different ways including: (a) directly manipulating the thing by using the controls and menus offered by it, (b) moving it from one position to another position, and (c) bringing the thing near the proximity of other things that create a combination with specific capabilities (moving a smart chair near a smart desk). In this extended abstract, we describe a design for a secure and trusted physical object model (POM) that can be used to describe spaces and smart things for context aware computing purposes.

October 2014

JADE: A Unified Programming Framework for Things, Web, and Cloud

In this paper, we present JADE, a framework that allows a developer to mix C and JavaScript constructs with JADE supplied keywords to construct a complete program to solve a particular computing activity in a ‘thing’. We describe the language constructs introduced by JADE and explain how they can be used to realize different software interaction patterns involving the thing, web, and cloud. We implemented a proof-of- concept prototype of JADE over Intel Galileos, web, and cloud. The experience of using JADE to write applications on Intel Galileos is described in the paper.

June 2014

SpaceOS: Operating System Services for Smart Computing Environments

SpaceOS is a system software stack for smart computing environments. The major objective of SpaceOS is to make it easier to create applications and deploy them in smart computing environments. It provides several core services for managing smart devices in physical spaces and letting them interact with cloud backends and web-based users. SpaceOS also supports a programming language called Jade that leverages the facilities provided by the system software stack to provide a simpler programming model for the things.

March 2014

Using Community Structure to Control Information Sharing in Online Social Networks

The dominant role of social networking in the web is turning human relations into conduits of information flow. This means that the way information spreads on the web is determined to a large extent by human decisions. Consequently, information security lies on the quality of the collective decisions made by the users. Recently, many access control schemes have been proposed to control unauthorized propagation of information in online social networks; however, there is still a need for mechanisms to evaluate the risk of information leakage within social networks. In this paper, we present a novel community-centric confidentiality control mechanism for information flow management on the web. We use a Monte Carlo based algorithm to determine the potential spread of a shared data object and to inform the user of the risk of information leakage associated with different sharing decisions she can make in a social network. By using the information provided by our algorithm, the user can curtail sharing decisions to reduce the risk of information leakage. Alternatively, our algorithm can provide input for a fully- or semi-automatic sharing decision maker that will determine the outcomes of sharing requests. Our scheme also provides a facility to reduce information flowing to a specific user (i.e., black listing a specific user). We used datasets from Facebook and Flickr to evaluate the performance of the proposed algorithms under different sharing conditions. The simulation results indicate that our algorithm can effectively control information sharing to reduce the risk of information leakage.

December 2013

Reality over Web: Pervasive Computing Meets the Web

This paper presents a chaotic map based image encoding scheme that allows pixel-level operations to be applied on an image while it remains encoded. Using this image encoding scheme, sensitive images can be manipulated by untrusted public cloud servers. Before the images are uploaded onto the public cloud servers they are encoded using user supplied keys by trusted-cloud servers. We fully describe the chaotic map based image encoding algorithm and perform a detailed security anal- ysis of it. Our security analysis demonstrates that the encoding scheme is robust against a wide variety of threats. Additionally, we implemented many pixel-level filtering operations on images over the proposed encoding and found that the overhead is less than 20%

November 2013

Privacy Aware Image Template Matching and Filtering in Clouds Using Ambient Data

Cloud computing is ideal for image storage and processing because it provides enormously scalable storage and processing resources at low cost. One of the major drawbacks of cloud computing, however, is the lack of robust mecha- nisms for the users to control the privacy of the data they farm out to the clouds. In this paper, we develop an image encoding scheme that enhances the privacy of image data that is outsourced to the clouds for processing. Unlike previously proposed image encryption schemes, our encoding scheme allows different forms of pixel-level image processing to take place in the clouds while the actual im- age is not revealed to the cloud provider. Our encoding scheme uses a chaotic map to transform the image after it is masked with an arbitrarily chosen ambi- ent image. We use numerous pixel-level image processing tasks such as template matching to demonstrate the ability of our scheme to perform computations on privacy enhanced images. A simplified prototype of the image processing system was implemented and the experimental results are presented in this paper.

November 2013

Confidentiality and Integrity in Crowdsourcing Systems

This paper presents a chaotic map based image encoding scheme that allows pixel-level operations to be applied on an image while it remains encoded. Using this image encoding scheme, sensitive images can be manipulated by untrusted public cloud servers. Before the images are uploaded onto the public cloud servers they are encoded using user supplied keys by trusted-cloud servers. We fully describe the chaotic map based image encoding algorithm and perform a detailed security anal- ysis of it. Our security analysis demonstrates that the encoding scheme is robust against a wide variety of threats. Additionally, we implemented many pixel-level filtering operations on images over the proposed encoding and found that the overhead is less than 20%.

July 2013

An Approach for Privacy Enhanced Pixel-Level Image Processing in Hybrid Clouds

This paper presents a chaotic map based image encoding scheme that allows pixel-level operations to be applied on an image while it remains encoded. Using this image encoding scheme, sensitive images can be manipulated by untrusted public cloud servers. Before the images are uploaded onto the public cloud servers they are encoded using user supplied keys by trusted-cloud servers. We fully describe the chaotic map based image encoding algorithm and perform a detailed security anal- ysis of it. Our security analysis demonstrates that the encoding scheme is robust against a wide variety of threats. Additionally, we implemented many pixel-level filtering operations on images over the proposed encoding and found that the overhead is less than 20%.

December 2012

Using Segmentation for Confidentiality Aware Image Storage and Retrieval on Clouds

Cloud computing is ideally suited for hosting ap- plications with large images because clouds can perform high performance computations and communications at very low upfront cost. While the benefits of clouds are compelling for image processing applications, security and privacy issues in using clouds are creating major problems. Because clouds are not passive storage devices, it is important to avoid encryption schemes that secure the data while preventing efficient processing of the data by the clouds. Therefore, this paper, is investigating approaches where segmentation is used to split the image data across multiple clouds. We show that segmentation, although a simple idea, can bring several benefits when deployed in cloud computing. A prototype of the system has been developed and initial performance results are reported here.

December 2012

Towards Privacy-Preserving Image Template Matching in the Clouds

Template matching is a fundamental building block for image search operations. In this paper, we present a scheme that allows privacy-preserving template matching operations on images that are stored on clouds. Our scheme uses “ambient image data” (images that are found in social media sites such as Flickr) as well as a privacy-preserving encoding technique to encode a given image before it is stored in a cloud. We show a particular encoding strategy that allows template matching to take place in the cloud while not revealing any information about the image or queried template to the cloud. A simplified prototype of the image processing system was implemented and the experimental results are presented in this paper. Our prototype shows the feasibility of performing privacy-aware template matching on encoded images.

December 2012

Towards Privacy Enhanced Limited Image Processing in the Clouds

Image processing and storage are enormously resource intensive tasks that can benefit from cloud computing. Lack of robust mechanisms for controlling the privacy of the data outsourced to clouds is one of the concerns in using clouds for image processing. This paper presents a new image encoding scheme that enhances the privacy of the images outsourced to the clouds while allowing the clouds to perform certain forms of computations on the images. Our encoding scheme uses a chaotic map to transform the image after it is masked with an arbitrarily chosen ambient image. A simplified prototype of the image processing system was implemented and the experimental results are presented in this paper. Our prototype shows the feasibility of performing a class of image processing tasks on images encoded for privacy.

December 2012

Character-based Search with Data Confidentiality in the Clouds

Recently, searching over encrypted data has become a hot research topic. Basic idea of privacy enhanced search is to generate an intermediate representation of the original text data and use it to perform the search. Prior research has used hash maps, tries, and other data structures to create the intermediate representation. We use a texture scheme for representing the characters. To enhance the privacy the textures are split and noise is added to each of the portions such that all portions of a texture needs to be collected to recover the original data in an unambiguous manner. One of the key advantages of our scheme is the ability to implement most of the search schemes (e.g., wildcard searches) that are performed with plain text searches. This paper fully describes our data representation scheme and presents the experimental data we gathered by implementing the scheme in a server cluster.

November 2012

Privacy Enhanced Pixel-Level Image Processing in the Clouds

Image processing and storage are enormously resource intensive tasks that can benefit from cloud computing. Lack of robust mechanisms for controlling the privacy of the data outsourced to clouds is one of the concerns in using clouds for image processing. This paper presents a new image encoding scheme that enhances the privacy of the images outsourced to the clouds while allowing the clouds to perform certain forms of computations on the images. Our prototype shows the feasibility of performing a class of image processing tasks on images encoded for privacy.

July 2012

Measuring the Availability of Images Posted on Social Media Sites

The amount of data stored in social media sites is humongous. It has very large in numbers and very diverse in variety. Researchers have already started using this information in various information security applications such as censorship resistance. When image data from social media sites are used in computational applications for hiding data or obfuscating data, it is important to retrieve the particular data used in the encoding process to retrieve the original data. Therefore, the availability of the image data is an important concern. In this paper, we investigated the availabilities of the images on Flickr. We examined nearly one million images hosted on Flickr and measured their availability in a two year period. We used the EXIF parameters normally generated by the cameras to further categorize the availabilities.

December 2011

Towards Community-Centric Integrity Management in Crowd-Sourced Systems

Integrity is an important concern in any knowledge management system. This paper discusses an ongoing research work that aims to develop a community-centric integrity management system for a large-scale knowledge management system that works on the Internet.

December 2011

Blocking in Community-Centric Information Management Approaches for the Social Web

Social networks are emerging as the arteries for information flow on the web. In a previous paper, we introduced a new community-centric approach for information flow control for the social web. This paper introduces two key improvements to the previously introduced mechanisms. The first improvement is the ability to model user heterogeneity with regard to information relaying on the social web. The second improvement is the ability to reduce information flow to a specific user (i.e., block information flowing to a specific user). We evaluate the algorithmic ideas using traces of interactions obtained from Facebook and Flickr. Our evaluations indicate that the algorithmic ideas developed by us are useful in controlling the information flow in the social web.

November 2011

Privacy and Security Requirements of Data Intensive Computing in Clouds

The scale and cost efficiencies provided by clouds make them ideal platforms for handling data intensive applications in variety of different sectors including e-health, e-commerce, and surveillance applications. This chapter investigates the privacy and security issues of large data sets that are stored and processed in cloud computing systems. If the experience gained from web-based transaction management systems is any indication, the safety of data held by cloud computing systems is not impregnable. There are various factors contributing to the data insecurity including the data handling policies adopted by the cloud operators, best practices adopted by the cloud provider in recycling used storage elements, and characteristics of the data handled by the clouds.

July 2011

Community-Centric Approaches for Confidentiality Management in Online Systems

The dominant role of social networking in the web is turning human relations into conduits for information flow. This means the way information spreads on the web is determined to a large extent by human decisions. Consequently, information security lies on the quality of decisions made by the users. Moreover, information spreading patterns rely on the collective decisions of interconnected sets of users. In this paper, we present a novel community-centric confidentiality control mechanism for information flow management on the web. We use a Monte Carlo based algorithm to determine the potential spread of a shared data object and inform the user of risk of information leakage associated with the different sharing decisions she can make in a social network. Using the information provided by our algorithm a user can curtail sharing decisions to reduce the risk of information leakage. Alternatively, our algorithm can provide input to a fully- or semi-automatic sharing decision maker that determines the outcomes of sharing requests. We used datasets from Facebook and Flickr to evaluate the performance of the proposed algorithms under different sharing conditions. The simulation results indicate that information sharing can be effectively controlled by our algorithm.

June 2011

Decentralized Management of Bi-modal Network Resources in a Distributed Stream Processing Platform

This paper investigates how a hybrid hosting platform made from dedicated and opportunistic resources can be used to host data stream processing applications. We pro- pose a system model for the hybrid hosting platform and develop resource management algorithms that are neces- sary to coordinate the allocation of the two classes of resources to the stream processing tasks. We used extensive simulations driven by traces styled from realistic system observations for evaluating the proposed resource alloca- tion heuristics. The results show that with proper man- agement, the synergy of dedicated and opportunistic re- sources yields considerably higher service throughput and thus, higher return on investment over expensive dedicated resources.

December 2010

A Social Accountability Framework for Computer Networks

We present an accountability framework for the Internet which ties a user’s action to her identity on an online social network. The framework is optional in that users do not need to be accountable at all times, but various web services can force accountability on the part of their users by only allowing accountable users access. Our design is general enough that higher level applications can place additional policies/restrictions on the basic accountability provided. In this paper, we introduce the design, discuss how various applications can be mapped onto our framework, and provide performance numbers from an experimental prototype.

December 2010

A Case for Community-Centric Controls for Information Sharing on Online Social Networks

In this paper, for controlling information sharing in online social networks (OSNs) we present a community-centric access control mechanism called myCommunity. We develop heuristic ideas for efficiently computing myCommunities in OSNs and evaluate it using traces from actual OSNs. The experimental results indicate that myCommunity is a feasible idea and simple estimation strategies can be effective to obtain an initial value. In ongoing work, we are extending myCommunity to incorporate the dynamic nature of the trust within OSNs.

October 2010

Online Identities and Social Networking

January 2010

Aligning the Incentives for Social Media Distribution

One of the key challenges in digital media distribution is digital rights management (DRM). DRM is a classic example of a problem that arises due to incentive misalignments that exists among transacting parties in a network. Because of misaligned incentives users have the inclination to break DRM if it becomes technically possible. This paper draws upon work in group lending and social psychology to develop a novel social media distribution scheme. The key objective is to x the incentive misalignment that exists between the users and media distributors. Using game theoretic modelling, certain conditions that should hold for social media distribution to work are educed.

December 2009

CASTLE: A Social Framework for Collaborative Anti-Phishing Databases

Phishing is a major problem on the Internet. The cornerstone of anti-phishing is detecting whether a given site is good or bad. Most of the approaches for anti-phishing rely on looking up centrally maintained repositories. In this paper, we present a decentralized framework called CASTLE that allows a collaborative approach for anti-phishing services. We implemented a prototype and then tested it on Planet-lab. The experiments indicate the viability of our framework.

November 2009

A Game Theoretic Analysis of Blacklisting in Online Data Storage Systems

In this paper, we investigate the problem of online data sharing on social networks from a game theoretic framework. We introduce blacklisting as trigger strategy to elicit cooperation among the players of a noncooperative sharing game. Using game theoretic analysis, we show the existence of an equilibrium in which the sharing conditions are honored when the involved players employ blacklisting strategies.

August 2009

Using Social Factors in Digital Rights Management

This paper describes how social factors can be incorporated into digital rights management. Specifically, we outline a design for a social distribution network that is built by agents that have incentive to discourage piracy. We pose the social distribution network formation as a game theoretic problem and identify the games played by the two types of agents.

August 2009

Socially Enhanced Network Address Translation

The rapid evolution of the Internet has forced the use of Network Address Translation (NAT) to help slow the decline of publicly available IPv4 addresses. While providing additional address space as well as privacy and security to its users, NAT eliminates the ability to establish incoming connections to devices within a private network. To address this issue, we propose combining social network topologies with the traditional NAT architecture to better integrate peer-to-peer communication through NATed networks. Called SocialNAT, this socially enhanced NAT allows incoming connections from trusted parties, resolving one of the central criticisms of the NAT approach.

August 2009

Social Authentication Protocol for Mobile Phones

Usernames and passwords that rely on the “something you know” factor is still the mainstay of authenticating on the web. In a mobile web, where users interact using mobile devices (mainly cellular phones), the username and password approach to authentication is not ideal.We need implicit approaches that require very little or no input from the users. This paper presents a new approach to use the “someone you know” factor for authentication using mobile phones. We have implemented the authentication protocol on Nokia N95 phones. We present some initial performance results from the implementation to demonstrate the viability of the approach in terms of time required to run the protocol and battery life.

March 2009

GINI: A User-level Toolkit for Creating Micro Internets for Teaching & Learning Computer Networking

GINI (GINI Is Not Internet) is an open-source toolkit for creating virtual micro Internets for teaching and learning computer networking. It provides lightweight virtual elements for machines, routers, switches, and wireless devices that can be interconnected to create virtual networks. The virtual elements run as unprivileged user-level processes. All processes implementing a virtual network can run within a single machine or can be distributed across a set of machines. The GINI provides a user-friendly GUI-based tool for designing, starting, inspecting, and stopping virtual network topologies. This paper describes the different components of GINI, briefly discusses ways of using the toolkit in a computer networking course, and reports on user feedback on an early (incomplete) version of the toolkit.

January 2009

Feasibility of a Socially Aware Authentication Scheme

Social interaction is already a proven component of informal identification: humans are naturally skilled at recognizing other people and are unlikely to be duped by impersonation. Based on this premise, a fourth-factor, someone-you-know, has already been proposed as an emergency authentication method. This paper explores leveraging a user’s preexisting social actions as a primary authentication tool, one that operates transparently and automatically without explicit user guidance. Specifically, we describe the feasibility of capturing a user’s local social context using short range wireless devices and evaluate the uniqueness of that context in comparison to that of possible aggressors.

December 2008

Using Dedicated and Opportunistic Networks in Synergy for a Cost-Effective Distributed Stream Processing Platform

This paper presents a case for exploiting the synergy of dedicated and opportunistic network resources in a distributed hosting platform for data stream processing applications. Our previous studies have demonstrated the benefits of combining dedicated reliable resources with opportunistic resources in case of high-throughput computing applications, where timely allocation of the processing units is the primary concern. Since distributed stream processing applications demand large volume of data transmission between the processing sites at a consistent rate, adequate control over the network resources is important here to assure a steady flow of processing. In this paper, we propose a system model for the hybrid hosting platform where stream processing servers installed at distributed sites are interconnected with a combination of dedicated links and public Internet. Decentralized algorithms have been developed for allocation of the two classes of network resources among the competing tasks with an objective towards higher task throughput and better utilization of expensive dedicated resources. Results from extensive simulation study show that with proper management, systems exploiting the synergy of dedicated and opportunistic resources yield considerably higher task throughput and thus, higher return on investment over the systems solely using expensive dedicated resources.

October 2008

An Access Control Scheme for Protecting Personal Data

We present a personal data access control (PDAC) scheme inspired by protection schemes used in communities for sharing valuable commodities. We assume PDAC users are members of an online social network such as facebook.com. PDAC computes a “trusted distance” measure between users that is composed of the hop distance on the social network and an affine distance derived from experiential data. The trusted distance classifies users into three zones: acceptance, attestation, and rejection. User requests falling in the acceptance zone are accepted immediately while the requests in the rejection zone are rejected outright. Requests in the attestation zone need additional authorization to gain access. PDAC also tracks reposts to minimize the spread of data beyond the limits set by the data originator. PDAC was implemented on a social network emulator to demonstrate its viability. The performance of certain PDAC functions were examined using simulations driven by portions of social graphs obtained from myspace.com.

January 2008

A localized certificate revocation scheme for mobile ad hoc networks

The issue of certificate revocation in mobile ad hoc networks (MANETs) where there are no on-line access to trusted authorities, is a challenging problem. In wired network environments, when certificates are to be revoked, certificate authorities (CAs) add the information regarding the certificates in question to certificate revocation lists (CRLs) and post the CRLs on accessible repositories or distribute them to relevant entities. In purely ad hoc networks, there are typically no access to centralized repositories or trusted authorities; therefore the conventional method of certificate revocation is not applicable. In this paper, we present a decentralized certificate revocation scheme that allows the nodes within aMANET to revoke the certificates of malicious entities. The scheme is fully contained and it does not rely on inputs from centralized or external entities.

November 2007

Bandwidth Landmarking: A Scalable Bandwidth Prediction Mechanism for Distributed Systems

This paper presents a new bandwidth inference mechanism that can be used to predict bandwidth across two nodes on the Internet. We used simulation and actual implementation on PlanetLab to compare the performance of the proposed mechanism against an existing approach. The results indicate that our approach is lightweight and yields better performance.

October 2007

Strategies to Create Platforms for Differentiated Services from Dedicated and Opportunistic Resources

This paper is proposing a new platform for implementing services in future service oriented architectures. The basic premise of our proposal is that by combining the large volume of uncontracted resources with small clusters of dedicated resources, we can dramatically reduce the amount of dedicated resources while the goodput provided by the overall system remains at a high level. This paper presents particular strategies for implementing this idea for a particular class of applications. We performed very detailed simulations on synthetic and real traces to evaluate the performance of the proposed strategies. Our findings on compute-intensive applications show that preemptive reallocation of resources is necessary for assured services. The proposed preemption-based scheduling heuristic can significantly improve utilization of the dedicated resources by opportunistically offloading the peak loads on uncontracted resources, while keeping the service quality virtually unaffected.

October 2007

A Trust based Approach for Protecting User Data in Social Networks

Social networks are graphs that represent relations among people, institutions, and their activities. We introduce a novel social access control (SAC) strategy inspired by multi-level security (MLS) [1] for protecting data on social networks. In MLS, the data objects and subjects are classified in hierarchical levels based on security clearance and access controlled accordingly. Instead of clearance levels, we use trust levels to annotate objects and subjects. The trust level of an object is specified by the creator. The trust level of a subject is obtained from a trust modeling process [2, 3]. Reading a data object is controlled using the relative trust values of subjects and objects. We describe one aspect of the SAC model that supports the confidentiality of read-only data objects. We performed simulation studies using traces from the flickr.com social network to evaluate the performance of some key primitives used in the SAC design.

June 2007

Towards a Gravity-based Trust Model for Social Networking Systems

Web-based social networks are emerging as the top applications on the Internet. With this immense popularity, many of the shortcomings of the current social network deployments are also coming to light. One of the glaring problems with existing web-based social networks is trust management. In this paper, we focus on trust modeling in social networks. Another allied issue that is not considered here is using trust in managing the activities within the social network. We introduce a gravity-based model for estimating trust. We present the complete model along with the trust computation algorithms. We present initial results from a simulation study that investigates the feasibility of the proposed scheme.

June 2007

Impact of Peer Churning on Trusted Gossiping for Peer-to-Peer Information Sharing

In a recent study we proposed a trusted gossip protocol for rumor resistant information sharing in peer-to- peer networks. Experiments using trace data collected from social networks like Flickr and other data sets showed that the trusted protocol can achieve significant reductions in rumor spreading with reasonable message and processing overheads. The study, however, did not consider node churn - a continuous process of node arrival and departure. In this paper, we show through experiments that the trusted gossip protocol can continue to perform equally well with churning nodes as in no-churn situations. We examine the trusted gossip protocol using synthetic and real traces for node churning collected from the Myspace social network. Our experiments show that the trusted protocol performance is considerably resilient even to extreme churning conditions.

May 2007

Trusted Gossip: A Rumor Resistance Dissemination Mechanism for Peer-to-Peer Information Sharing

Epidemic protocols such as gossip have proven to have many desirable properties for information sharing. However, trust is one of the issues that is yet to be examined with respect to these protocols. In this paper, we present a trusted gossip protocol that uses trust estimates to impede spreading of rumors with reasonable message and processing overheads. We use traces collected from known social networks to estimate the performance of trusted gossip.

May 2007

Towards a Decentralized Algorithm for Mapping Network and Computational Resources for Distributed Data-flow Computations

Several high-throughput distributed data-processing applications require multi-hop processing of streams of data. These applications include continual processing on data streams originating from a network of sensors, composing a multimedia stream through embedding several component streams originating from different locations, etc. These data-flow computing applications require multiple processing nodes interconnected according to the data-flow topology of the application, for on-stream processing of the data. Since the applications usually sustain for a long period, it is important to optimally map the component computations and communications on the nodes and links in the network, fulfilling the capacity constraints and optimizing some quality metric such as end-to-end latency. The mapping problem is unfortunately NP-complete and heuristics have been previously proposed to compute the approximate solution in a centralized way. However, because of the dynamicity of the network, it is practically impossible to aggregate the correct state of the whole network in a single node. In this paper, we present a distributed algorithm for optimal mapping of the components of the data flow applications. We propose several heuristics to minimize the message complexity of the algorithm while maintaining the quality of the solution.

May 2007

Benefits of Clustering in Landmark-aided Positioning Algorithms

In this paper, we propose simple and practical strategies to improve the trustworthiness of network positioning schemes. In particular, our strategies make network positioning immune to non-random perturbations such as denial-of-service attacks and localized network congestion. Additionally, we studied the overhead generated by existing network positioning algorithms and propose an algorithm that results in low overhead while retaining very high accuracies. We performed extensive simulations and implementations on PlanetLab to examine the performance trade-offs.

May 2007

A Secure MANET Routing Protocol with Resilience Against Byzantine Behaviours of Malicious or Selfish Nodes

Secure routing in mobile ad hoc networks (MANETs) has emerged as a important MANET research area. MANETs, by virtue of the fact that they are wireless networks, are more vulnerable to intrusion by malicious agents than wired networks. In wired networks, appropriate physical security measures, such as restriction of physical access to network infrastructures, can be used to attenuate the risk of intrusions. Physical security measures are less effective however in limiting access to wireless network media. Consequently, MANETs are much more susceptible to infiltration by malicious agents. Authentication mechanisms can help to prevent unauthorized access to MANETs. However, considering the high likelihood that nodes with proper authentication credentials can be taken over by malicious entities, there are needs for security protocols which allow MANET nodes to operate in potential adversarial environments. In this paper, we present a secure on-demand MANET routing protocol, we named Robust Source Routing (RSR). In addition to providing data origin authentication services and integrity checks, RSR is able to mitigate against intelligent malicious agents which selectively drop or modify packets they agreed to forward. Simulation studies confirm that RSR is capable of maintaining high delivery ratio even when a majority of the MANET nodes are malicious.

September 2006

Brokering and Its Use for Resource Matchmaking in Public-Resource Grids

June 2006

Utilizing Unreliable Public Resources for Higher Profit and Better SLA Compliance in Public Computing Utilities

November 2005

An Analytical Approach to Providing Controllable Differentiated Quality of Service in Web Servers

October 2005

A Secured Hierarchical Trust Management Framework for Public Computing Utilities

May 2005

A Secured Trust Management Framework for Public Computing Utilities

April 2005

Measuring the Scalability of Resource Management Systems

December 2004

Towards a Wide-Area Online Benchmarking Architecture for Service Hosting Platforms

December 2004

Leveraging Public Resource Pools to Improve the Service Compliances of Computing Utilities

December 2004

Heuristics for Resource Provisioning in Computing Utilities Using Dedicated and Non-Dedicated Resources

November 2004

On the Benefits of Profile-Based Naming for Large Network Computing Systems

October 2004

A Taxonomy of Network Computing Systems

August 2004

Towards a Quality of Service Aware Public Computing Utility

August 2004

A Fair Synchronization Protocol with Cheat Proofing for Decentralized Online Multiplayer Games

August 2004

A Cheat Controlled Protocol for Centralized Online Multiplayer Games

May 2004

Evaluation of Request Distribution Schemes for Web-Server Clusters

April 2004

Trust Brokering System and Its Application to Resource Management in Public-Resource Grids

January 2004

A Synchronous Co-allocation Mechanism for Grid Computing Systems

October 2003

Public Computing Utilities: Issues, Approaches, and Applications

April 2003

Trust Modeling for Peer-to-Peer based Computing Systems

April 2003

A Wide-Area Content-based Routing Mechanism